How to simple check and tigger ldap performance

[B.C.K]

Hello everybody,

I am trying to check our ldap connection because the Admin gots messages that the connection of LDAP Server seems to be slow.

What I did is a Item simplecheck with net.tcp.service.perf[ldap,{$OID.DEV.HOST},3060] type is Numeric(unsigned)


The trigger is configured like {oid.dev.host:net.tcp.service[ldap,{$OID.DEV.HOST},3060].max(#3)}=0 which is copied from the out of the box template

If I check the latest data then I this result:
Its always 0

The LDAP Admin and I do tcpdump to eachother.
I did tcpdump -vv -i ens192 host IP.address and port 3060
He and I could see communication between the zabbix server and ldap server.
But the output of tcpdump, I could not interprete it.

Furthermore I did ldapsearch from zabbix server which was tricky because the passward has the character "/" and "|". these were then escaped with \
After escaping I got a result. This and the bind dn (cn=zabbix_ldap,cn=testusers,cn=Users,dc=xxx,dc=xx x) was updated in the Item to the fields "User name" and "Password"


My question to you is if I confed a wrong trigger oder item?
Why I am getting always 0?

By the way the ping from zabbix to ldap is in avg. 0.424 ms


My second question is how to check the performance from ldaps?

Thank you in advance.

[Hamardaban]

0 - serviceis down

you are checking the ldap performance correctly, but use not integer - float.
perhaps this will help you understand what is being done during verification:

https://www.zabbix.com/documentation..._check_details

ldap

Opens a connection to an LDAP server and performs an LDAP search operation with filter set to (objectClass=*). Expects successful retrieval of the first attribute of the first entry. Default port 389 is used if not specified.

[B.C.K]

Hello Hamardaban,

thank you for your post. I already read this text but not understand the first sentence with "... with filter set to (ojectClass=*)."
As you metioned I changed from unsigned to float. Unfortunately still getting value of 0.000000 .

One more question. Simplecheck is agentless right. Therefore if I take the interface from Zabbix (IP, but not localhost), this would not be wrong.
Am I right?

And do I have to config something in zabbix_server.conf ?

[Hamardaban]

filter - see ldap protocol
simp.check - from zabbix server(!) interface
nothing in conf.